Holdfast
Privacy policy · 23 October 2026
Holdfast saves browser tabs on your computer. Your saved tabs never get lost to a silent overwrite, and they are not uploaded as part of saving, restoring, or searching.
What stays on this device
Saves, the trash, settings, and a cached license record live in the browser’s local extension storage. A save can include the page title, address, pinned state, favicon address, tab group name and color, and window size and position. Holdfast does not have an account, and it does not sync that library to a server.
The library screen does not fetch favicon images. Addresses are shown as text.
Uninstalling the extension removes this local storage. Export a backup file first if you want a copy that survives uninstall. A backup is a JSON file written to your computer.
The only network request
If you enter a Pro license key, Holdfast asks the payment provider whether that key is active. That request goes to live.dodopayments.com. It sends the key, a short device name (“Holdfast”), and, after activation, the activation id. It does not send page titles, addresses, or tab groups. It does not send a secret API key.
The request happens when you activate a key, and again about once a week while a key is stored. If the provider says the key is disabled, expired, or otherwise not valid, Pro turns off. A yearly subscription does that when the subscription is cancelled, expires, or is held. If you are offline, a key that was valid stays valid for 14 days after the last successful check. Removing the key asks the provider to release that activation, and also deletes the local copy.
Opening a checkout link is a normal page you choose to open. Holdfast does not attach your tabs to it.
Permissions
- Tabs and tab groups — read open windows so a save can be made, and reopen them later, including group name and color.
- Storage and unlimited storage — keep the library on this device, including large ones.
- Alarms — take snapshots, recheck a license about once a week, and, if you turn it on, write a backup file on a schedule.
- Downloads — write that backup into your downloads folder.
- License host, only if you allow it — contact
live.dodopayments.comwhen you activate or recheck a key.
What Holdfast does not do
It does not run remote code, inject scripts into pages, read incognito windows, sell data, or include advertising. It does not close tabs when you save.